Comscripts

Records19All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

Comscripts records in CISA KEV

No Comscripts vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cs-forum 4 records LOW Web Server Creator Web Portal 4 records LOW Phprog 2 records LOW Web Server Creator 2 records LOW Annoncev 1 record LOW Cs Guestbook 1 record LOW Gedcom To Mysl 1 record LOW J-web Pics Navigator 1 record LOW

Records

1 record in Cs Guestbook · all components

TI-2007-04759 CVE-2007-4937 · GHSA-xf67-28w8-mv26

CS Guestbook stores sensitive information under the web root with insufficient access…

LOW 28

CS Guestbook stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin name and MD5 password hash via a direct request for base/usr/0.php.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02581 Published 2007-09-18 No fix listed CWE-264

Open these records in search →

Critical	0
High	9
Medium	10
Low	0
No CVSS	0